But my Roadwarrior (the phone) is changing from GW every time it connects (random 200.25.64/26), as you can see here i need a bi-nat, for the sad case it hits the same ip 172.16.20.0/24 some day, dont blame me about the ip addressing.

Here is my ipsec.conf

ike passive from any to any main auth hmac-sha1 enc aes group modp1024 quick auth hmac-sha1 enc aes psk x6f1d59e544ffccd5d48cf8f9199cd7af4005535